Organization and roles

Access is organization-scoped. The current API includes customer-facing organization membership and capability surfaces, including /api/org-members and /api/capabilities where defined by the OpenAPI document.

A role or capability should be treated as the authorization boundary for an action; do not infer permissions from UI visibility. Organization administration, billing, BAA, training, and other governance surfaces are intentionally outside this customer API guide. See the API scope catalog.